We have a machine running Windows Server 2012 that is using DHCP for ip assignment, in an Active Directory network. It is standard protocol for us to use static ip and no one recalls changing this machine.
Is there a way to determine when the LAN adapter configuration was changed from static to DHCP after the fact? It was likely many months ago. (Maybe even forever, possibly someone just never assigned static to begin with.)
Not in the default state. DHCP audit logging is disabled by default (and not retroactive). Security/user audit logging won't show that level of granularity.